Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: zohocorp'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2025-27709 8.3 Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports. 2025-06-16 15:14:52
CVE-2025-36528 8.3 Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports. 2025-06-16 15:14:39
CVE-2025-41444 8.3 Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module. 2025-06-16 15:14:06
CVE-2023-48793 9.8 Zoho ManageEngine ADAudit Plus through 7250 allows SQL Injection in the aggregate report feature. 2025-06-11 17:15:34
CVE-2023-48792 9.8 Zoho ManageEngine ADAudit Plus through 7250 is vulnerable to SQL Injection in the report export option. 2025-06-11 17:15:34
CVE-2023-49943 5.4 Zoho ManageEngine ServiceDesk Plus MSP before 14504 allows stored XSS (by a low-privileged technician) via a task's name in a time sheet. 2025-06-02 15:15:23
CVE-2023-29505 4.3 An issue was discovered in Zoho ManageEngine Network Configuration Manager 12.6.165. The WebSocket endpoint allows Cross-site WebSocket hijacking. 2025-05-30 16:15:34
CVE-2022-24447 4.0 An issue was discovered in Zoho ManageEngine Key Manager Plus before 6200. A service exposed by the application allows a user, with the level Operator, to access stored SSL certificates and associated key pairs during export. 2025-05-30 16:15:29
CVE-2022-24446 3.5 An issue was discovered in Zoho ManageEngine Key Manager Plus 6.1.6. A user, with the level Operator, can see all SSH servers (and user information) even if no SSH server or user is associated to the operator. 2025-05-30 16:15:29
CVE-2021-31531 7.5 Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF). 2025-05-30 16:15:27
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/54
Zapisa po stranici: